Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/bdeb27-3434-4254-8241-7fddd22202bf/1/bEme6h8J0BEiUo1BdU03xcqjS6c.mft
File: bEme6h8J0BEiUo1BdU03xcqjS6c.mft (raw, json)
Hash identifier: cW0nW9sUn58/ok4hHRZaf+LB6tiAq6P9056M1x0yZFg=
Subject key identifier: 43:A7:CA:AE:27:7E:7B:F0:3D:E7:6E:B8:3A:EC:9A:6F:75:6A:6D:AE
Authority key identifier: 6C:49:9E:EA:1F:09:D0:11:22:52:8D:41:75:4D:37:C5:CA:A3:4B:A7
Certificate issuer: /CN=6c499eea1f09d01122528d41754d37c5caa34ba7
Certificate serial: 01989E95137108D590C7F24556EA1EB4FF76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEme6h8J0BEiUo1BdU03xcqjS6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/bdeb27-3434-4254-8241-7fddd22202bf/1/bEme6h8J0BEiUo1BdU03xcqjS6c.mft
Manifest number: 0BFF
Signing time: Tue 12 Aug 2025 14:00:26 +0000
Manifest this update: Tue 12 Aug 2025 14:00:26 +0000
Manifest next update: Wed 13 Aug 2025 14:00:26 +0000
Files and hashes: 1: bEme6h8J0BEiUo1BdU03xcqjS6c.crl (hash: G+5tF6vZ+EoGQVOS9FjZs2TV2rYdAToXc39pg7tyatU=)
2: kqOQ78t4w6FZpmwe4_k_12IlEMA.roa (hash: HyBjAoXV0kXvavyvJersLyuqJgRnm+q7hrBZfg1KGdM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/bdeb27-3434-4254-8241-7fddd22202bf/1/bEme6h8J0BEiUo1BdU03xcqjS6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/bdeb27-3434-4254-8241-7fddd22202bf/1/bEme6h8J0BEiUo1BdU03xcqjS6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/bEme6h8J0BEiUo1BdU03xcqjS6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 13:24:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9e:95:13:71:08:d5:90:c7:f2:45:56:ea:1e:b4:ff:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c499eea1f09d01122528d41754d37c5caa34ba7
Validity
Not Before: Aug 12 14:00:26 2025 GMT
Not After : Aug 13 14:00:26 2025 GMT
Subject: CN=43a7caae277e7bf03de76eb83aec9a6f756a6dae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:9b:f7:b1:18:7a:48:3d:2d:aa:cd:81:2a:3e:
71:38:69:12:56:38:76:d9:78:4d:68:a7:47:43:89:
ee:70:91:c5:f4:eb:e0:ab:38:2f:fc:ab:51:6a:8e:
a5:2d:46:d3:1d:f3:ec:94:76:98:41:11:8d:a7:bd:
e7:27:84:13:f6:51:2e:e3:a8:91:81:b8:26:9d:fb:
c6:55:f0:ba:f9:9e:ec:05:c7:30:e1:81:c9:4f:e9:
3d:59:26:2c:39:ab:9b:89:52:41:ae:11:06:f0:e2:
ab:d5:5c:55:46:9e:a0:71:67:9c:8c:de:09:0e:f4:
00:9e:1e:fc:4f:d2:11:e2:65:f4:b8:a8:f6:f6:d2:
46:17:66:b5:f0:ab:24:17:ae:53:ee:67:a9:84:b9:
40:9e:2f:75:ac:e4:1f:c4:97:55:d7:90:75:1c:54:
c9:96:77:a6:f5:d0:ad:22:26:35:2a:14:e0:40:3a:
40:69:05:ca:7e:2d:af:8c:ca:62:36:68:b9:5f:30:
02:f4:52:86:95:22:e4:b3:2d:bb:0e:2e:4b:b5:6d:
95:40:03:63:84:ca:a4:07:0a:f6:8d:92:8e:b3:5d:
b4:b3:2c:e1:67:a0:f9:9e:dc:3e:35:2f:d0:4e:69:
97:2d:b8:18:db:c0:61:13:08:f4:5d:a1:9e:88:45:
86:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:A7:CA:AE:27:7E:7B:F0:3D:E7:6E:B8:3A:EC:9A:6F:75:6A:6D:AE
X509v3 Authority Key Identifier:
keyid:6C:49:9E:EA:1F:09:D0:11:22:52:8D:41:75:4D:37:C5:CA:A3:4B:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEme6h8J0BEiUo1BdU03xcqjS6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/bdeb27-3434-4254-8241-7fddd22202bf/1/bEme6h8J0BEiUo1BdU03xcqjS6c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/bdeb27-3434-4254-8241-7fddd22202bf/1/bEme6h8J0BEiUo1BdU03xcqjS6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:f6:8b:61:83:34:af:e3:e1:b0:32:c7:8f:39:c3:67:8c:5e:
ed:1a:b0:5b:d3:f0:f4:1b:e1:dd:4d:a2:81:be:da:3e:01:48:
90:24:3c:10:c6:f9:ab:01:7e:17:0a:1a:44:44:91:84:19:a1:
f5:e3:32:77:3a:e3:e1:b5:62:b2:a8:db:53:e7:e8:bf:69:1a:
1c:02:54:a9:43:96:e7:b3:50:4d:95:38:e7:82:bf:eb:e3:56:
12:60:95:71:40:4a:90:2b:77:37:ef:d0:49:28:9c:15:70:bc:
4c:f6:a6:f0:16:2b:f1:ad:71:7d:2a:82:06:b6:cc:4a:cd:99:
a2:88:0c:d4:02:68:3b:93:1e:4f:93:e8:1b:df:55:2c:db:0a:
48:93:09:54:e9:c2:7b:54:85:ce:ec:e1:84:58:fe:3a:91:cc:
56:d1:f2:d1:fa:42:50:9a:40:12:01:41:0c:cf:6d:d5:63:a3:
db:61:2d:77:40:9f:fa:19:2c:ac:90:c7:89:fe:9f:4e:9a:ce:
98:bf:52:6f:c0:8e:66:81:a4:0c:80:09:8f:72:e2:80:84:55:
12:ae:31:80:e9:39:2e:df:a0:45:b4:02:5f:de:39:9b:b9:ad:
27:f3:06:19:e6:e0:d3:5f:4c:30:66:26:12:fa:47:23:11:c0:
a9:d4:b8:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZielRNxCNWQx/JFVuoetP92MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjNDk5ZWVhMWYwOWQwMTEyMjUyOGQ0MTc1NGQzN2M1Y2Fh
MzRiYTcwHhcNMjUwODEyMTQwMDI2WhcNMjUwODEzMTQwMDI2WjAzMTEwLwYDVQQD
Eyg0M2E3Y2FhZTI3N2U3YmYwM2RlNzZlYjgzYWVjOWE2Zjc1NmE2ZGFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA35v3sRh6SD0tqs2BKj5xOGkSVjh2
2XhNaKdHQ4nucJHF9Ovgqzgv/KtRao6lLUbTHfPslHaYQRGNp73nJ4QT9lEu46iR
gbgmnfvGVfC6+Z7sBccw4YHJT+k9WSYsOaubiVJBrhEG8OKr1VxVRp6gcWecjN4J
DvQAnh78T9IR4mX0uKj29tJGF2a18KskF65T7mephLlAni91rOQfxJdV15B1HFTJ
lnem9dCtIiY1KhTgQDpAaQXKfi2vjMpiNmi5XzAC9FKGlSLksy27Di5LtW2VQANj
hMqkBwr2jZKOs120syzhZ6D5ntw+NS/QTmmXLbgY28BhEwj0XaGeiEWGZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEOnyq4nfnvwPeduuDrsmm91am2uMB8GA1UdIwQY
MBaAFGxJnuofCdARIlKNQXVNN8XKo0unMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkVtZTZoOEowQkVpVW8xQmRVMDN4Y3FqUzZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9iZGViMjctMzQzNC00MjU0LTgyNDEt
N2ZkZGQyMjIwMmJmLzEvYkVtZTZoOEowQkVpVW8xQmRVMDN4Y3FqUzZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS9iZGViMjctMzQzNC00MjU0LTgyNDEtN2ZkZGQyMjIwMmJm
LzEvYkVtZTZoOEowQkVpVW8xQmRVMDN4Y3FqUzZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC/aLYYM0
r+PhsDLHjznDZ4xe7RqwW9Pw9Bvh3U2igb7aPgFIkCQ8EMb5qwF+FwoaRESRhBmh
9eMydzrj4bVisqjbU+fov2kaHAJUqUOW57NQTZU454K/6+NWEmCVcUBKkCt3N+/Q
SSicFXC8TPam8BYr8a1xfSqCBrbMSs2ZoogM1AJoO5MeT5PoG99VLNsKSJMJVOnC
e1SFzuzhhFj+OpHMVtHy0fpCUJpAEgFBDM9t1WOj22Etd0Cf+hksrJDHif6fTprO
mL9Sb8COZoGkDIAJj3LigIRVEq4xgOk5Lt+gRbQCX945m7mtJ/MGGebg019MMGYm
EvpHIxHAqdS4xg==
-----END CERTIFICATE-----
Generated at Tue Aug 12 22:50:09 2025 by rpki-client